CVE-2026-41709

VMware ESX contains an insufficient logging vulnerability. A malicious administrator could exploit this issue to perform certain operations without them being logged.

Score

CVSS 3.1 2.7 Low

Status

Undergoing Analysis - security@vmware.com

Published

2026-07-30

Last modified

2026-10-28

Weaknesses

CWE-778

Affected products

• Cloud Foundation (Vmware)
• Esx (Vmware)
• Telco Cloud Platform (Vmware)
• Vsphere Foundation (Vmware)

References

• https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/38017
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-41709